CVE-2020-26186

Medium

Description

Dell Inspiron 5675 BIOS versions prior to 1.4.1 contain a UEFI BIOS RuntimeServices overwrite vulnerability. A local attacker with access to system memory may exploit this vulnerability by overwriting the RuntimeServices structure to execute arbitrary code in System Management Mode (SMM).

SeverityMedium
CVSS6.8
Exploit probability—
ProductDell Inspiron 5675 Firmware
PublishedJan 8, 2021
First seenJan 8, 2021
Weakness typeCWE-642CWE-642

How to fix

Update
  • dell inspiron_5675_firmware1.4.1 or later

Affected products

ProductAffected versionsFixed in
dell inspiron_5675_firmwarev < 1.4.11.4.1

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.